(CVE-2025-4665) Contact Form CFDB7 SQL注入与不安全反序列化漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-4665
• https://cve.imfht.com/detail/CVE-2025-4665
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0006.md
• https://github.com/advisories/GHSA-mj35-jrmp-p9jm
• https://www.sentinelone.com/vulnerability-database/cve-2025-4665/
• https://www.knowsafe.com/ti/info/0/1002091
• https://www.kodemsecurity.com/resources/vulnerability-alert-cve-2025-4665-critical-pre-auth-sql-injection-in-wordpress-contact-form-database-plugin-cfdb7
• https://access.redhat.com/security/cve/cve-2025-4665
• https://wordpress.org/plugins/contact-form-cfdb7

Related Vulnerabilities

• PoCCVE-2026-4257: WordPress Contact Form by Supsystic - Server-Side Template Injection
• WordPress Contact-form-by-supsystic SSTI注入(CVE-2026-4257)
• PoCwp-cf7-data-source-fpd: WordPress Data Source for Contact Form 7 - Full Path Disclosure
• 孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetContactEmail SQL 注入漏洞
• PoCwp-contact-form-7-fpd: WordPress Contact Form 7 - Full Path Disclosure
• PoCwp-contact-form-fpd: WordPress Contact Form - Full Path Disclosure
• 孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetContactEmailByFid SQL 注入漏洞
• （CVE-2015-10137）WordPress Contact Form With File Upload插件任意文件上传漏洞
• 用友NC ContactsQueryServiceServlet 反序列化漏洞